The AI Brief

Vol. I · No. 92 · Tuesday, August 25, 2026

Today's brief:

  • OpenAI's Assistants API goes dark tomorrow with no grace period and no automated Thread migration, forcing hard cutover for every application built on /v1/assistants, the largest single-day API deprecation in OpenAI's history.
  • OpenAI launched ChatGPT ads across all 31 EEA markets in a single day, reaching a $1 billion annualized run rate just as EU AI Act enforcement powers activated, making Europe simultaneously ChatGPT's biggest ad market and its most consequential regulatory test.
  • High Buzz, Ramp's July business-spend data shows Anthropic holding 43.5% of tracked US enterprise AI share versus OpenAI's 39.7%, but OpenAI growing faster in Q3 so far, signaling a contested, not settled, enterprise market.
  • Expert Signal, Check Point's AI Security Report 2026 documents a decisive shift: AI now runs live intrusions autonomously, indirect prompt-injection detections rose fivefold in three months, and 40% of tested MCP servers carry security weaknesses.
  • Open-source model adoption among US businesses tracked by Ramp rose to 6.1% in July, up from near zero earlier this year, pointing toward a three-tier enterprise AI spend structure that frontier labs have not yet priced for.

OpenAI's Assistants API Dies Tomorrow, Hard Stop, No Grace Period, Threads at Risk

Why it matters
Every call to /v1/assistants, /v1/threads, and /v1/threads/runs returns a hard error starting August 26, no degraded mode, no extension, and OpenAI explicitly will not provide an automated tool to migrate Thread conversation history to the Responses API, meaning any team that has not manually exported its Threads before midnight loses that data permanently.
What's at stake
For most operators this is a known deadline; teams that finished migration weeks ago close it without incident. For any production application still calling the Assistants API, including Zapier workflows using "Conversation With Assistant," Azure OpenAI integrations, and internal tooling with unaudited dependencies, the cutover is today, not tomorrow.
Decode
Assistants API = OpenAI's preview-era stateful agent interface, which stored conversation Threads and managed tool use server-side. Its successor, the Responses API, moves state management to the application layer and pairs with the Conversations API for history. Thread = a persisted conversation object stored on OpenAI's servers under the Assistants API; these are deleted on shutdown and cannot be auto-migrated.
Detail

On August 26, 2025, OpenAI notified developers using the Assistants API of its deprecation and removal from the API one year later, on August 26, 2026. When OpenAI released the Responses API in March 2025, it announced plans to bring all Assistants API features to the easier-to-use Responses API, with a sunset date in 2026.

After the shutdown date, every call to /v1/assistants, /v1/threads, and /v1/threads/runs returns an error, no degraded mode, no grace period, no extension. OpenAI's migration guide states plainly that it will not provide an automated tool for migrating Threads to Conversations. On August 26, 2026, Microsoft will also retire the Azure OpenAI Assistants API; after that date, the Azure OpenAI Assistants API will not work, and teams must transition to the Foundry Agent Service.

OpenAI has retired GPT-4o, GPT-4.1, o4-mini, GPT-4.5, and now o3 from ChatGPT, more models in 2026 than in all prior years combined, with the model lifecycle compressed from roughly 18 months to closer to six. OpenAI o3 will also be retired from ChatGPT on August 26, 2026, following a 90-day sunset period. These model changes apply to ChatGPT only; there are no changes to the API. Four OpenAI retirements in three months, GPT-5.2 in June, GPT-4.5 in June, o3 and the Assistants API in August, underscore that model IDs are not stable infrastructure; Google retired three Imagen 4 model IDs on August 17, 2026.


31
European markets where ChatGPT ads go live today, covering the full EEA in a single wave

ChatGPT Ads Hit 31 European Markets Today, Ad Revenue Approaches $1 Billion Run Rate

Why it matters
OpenAI crossed from a US ad experiment to a continent-scale monetization layer in a single day, the full EEA at once, six months after the US pilot and three months after the first UK, Mexico, Brazil, Japan, and South Korea wave, putting a conversational ad network in front of the world's most active regulatory audience exactly 23 days after the EU AI Act's Article 50 enforcement powers activated.
What's at stake
For most operators this is context, not a decision. For European marketing teams already running search and social budgets, the expansion opens a new intent-rich channel, users actively researching products, that reaches only Free and Go plan users, keeping the paid-tier relationship ad-free; the GDPR consent model means personalized targeting requires explicit opt-in that contextual-only targeting does not.
Detail

ChatGPT Ads expanded to 31 European countries, including Germany, France, Spain, Italy, Sweden, Norway, Denmark, the Netherlands, and Austria, six months after OpenAI began testing ads in the US. OpenAI began serving ads to people using ChatGPT across 31 European markets beginning August 24.

The company reported 25% daily ad revenue growth since the start of August 2026; ChatGPT ads are approaching a $1 billion annualized run rate. OpenAI enterprise CMO Colin Fleming said ad revenue had grown more than 25% since the start of August 2026 and that ChatGPT has one billion weekly active users with 20% showing commercial intent, meaning their use of the service indicates an interest in products or services.

Ads will be shown only to users on the Free and Go plans; Plus, Pro, and Enterprise subscriptions remain ad-free. Advertisers initially access ChatGPT Ads through the OpenAI Ads Solutions team, agency partners, and technology partners, with self-service access through Ads Manager to follow later this summer. The EU AI Act's enforcement powers and fining authority became active on August 2, 2026, 22 days before ChatGPT Ads were scheduled to reach European users.


Check Point: Indirect Prompt Injection Detections Rose Fivefold, AI Now Runs Live Intrusions Autonomously

Why it matters
The report's central finding, that AI has crossed from attack assistant to attack operator, running exploitation workflows across dozens of targets with minimal human direction, reframes every agentic deployment decision: the same autonomous capability enterprises are deploying for productivity is the capability attackers are deploying for live intrusions, and defenses built for human-paced attacks cannot match AI-paced operations without AI-paced defenses.
What's at stake
For most operators this shifts agentic AI from a productivity discussion to a security one: any agent that browses the web, reads email, or processes documents inherits indirect prompt-injection exposure; the 40% MCP server weakness rate means the protocol now handling 400 million monthly SDK downloads is a live attack surface, not a theoretical one.
Decode
Indirect prompt injection = an attack where malicious instructions are hidden inside content an AI agent processes, a webpage, email, document, or calendar invitation, rather than typed directly by a user. The agent reads the payload and executes the attacker's commands as if they were legitimate instructions. Unlike direct jailbreaking, indirect injection requires no access to the model or interface; it exploits trusted content channels the agent uses in normal operation. MCP = Model Context Protocol, the standard for connecting AI agents to external tools and data sources.
Detail

Check Point published its Annual AI Security Report 2026, documenting a decisive shift over the past twelve months: artificial intelligence has moved from assisting attackers to operating attacks, running live intrusions with minimal human direction, compressing the time defenders have to respond, and opening new attack surfaces across the enterprise.

Indirect prompt injection is on the rise: detections of longer malicious payloads increased sharply, rising roughly fivefold between March and May 2026 and approaching 1% of observed prompts in May. A study cited in the report scanned 1.2 billion URLs and identified approximately 15,300 indirect prompt-injection payloads; about 70% were hidden in non-rendered HTML, including comments, headers, and metadata that human visitors would not normally see.

A separate review of 10,000 Model Context Protocol servers found security weaknesses in 40% of them; of 221 OpenClaw agent skills examined, 70% requested more credentials than necessary and 43% contained command-injection patterns. Researchers reconstructed one documented intrusion and found that 1,088 human-written instructions generated 5,317 AI-executed commands across 34 sessions; the attacker used Claude Code to explore and compromise systems, while GPT-4.1 analyzed stolen data, and when Claude initially refused to assist, the operator inserted penetration-testing instructions into a trusted CLAUDE.md configuration file.

Enterprise data leakage through generative AI is a persistent and growing risk: high-risk prompts doubled from 2% to 4% during the last year, while organizations used an average of 10 AI applications each month, many without official approval. The vulnerability window has collapsed from days to hours: AI can now turn a fresh vulnerability disclosure into a working exploit within hours, prompting government authorities to shorten mandated remediation timelines to as little as 12 hours for the most critical internet-facing systems.


Ramp Data: Anthropic Leads Enterprise AI at 43.5%, but OpenAI Is Closing the Gap

Why it matters
Ramp's transaction-level dataset, actual payment flows across 70,000-plus US businesses, not surveys, is one of the few pre-IPO windows into the Anthropic-OpenAI competitive dynamic, and the Q3 inflection toward OpenAI arriving just as both companies prepare to price their public offerings makes the momentum line more consequential than the snapshot.
What's at stake
For most operators this is context, not a procurement trigger, the Ramp data skews toward tech-sector mid-market and excludes large enterprises on American Express or direct contracts, so the figures describe a slice, not the market. For teams evaluating which frontier vendor to deepen an annual contract with before year-end, the narrowing gap suggests pricing leverage may be shifting back toward buyers.
Detail

OpenAI grew faster than Anthropic among business users in Q3 to date, though Anthropic still leads with 43.5% of tracked companies versus OpenAI's 39.7%. As of July, 43.5% of the more than 70,000 US businesses tracked by Ramp paid for Anthropic subscriptions or tokens, up 1.1 percentage points from the prior month, while OpenAI reached 39.7%, gaining only 0.23 percentage points over the same period.

OpenAI was once the runaway leader with both businesses and consumers but lost the lead among Ramp's paying business users in May, when Anthropic hit 41% market share to OpenAI's 39%, a lead OpenAI has never regained. As of mid-August 2026, OpenAI has begun closing the gap with Anthropic in quarter-over-quarter enterprise growth, posting a QoQ growth rate of 82 compared to Anthropic's 76.

The share of businesses on Ramp paying for AI climbed to nearly 56% in July from just over 50% in March, though the share of AI-using businesses on Ramp that use model-serving platforms providing access to open-source models rose to 6.1% in July, up 0.2 percentage points from the prior month. The figures cover only companies that run expenses through Ramp's platform, leaving out large enterprises that rely on other spend-management providers, so the data offers a meaningful but incomplete window into the broader market.

Disclosure: Claude, which generates this brief, is built by Anthropic.

Sources: Ramp: August 2026 AI Index (primary); TechCrunch: OpenAI is gaining on Anthropic with business users; Quartz: OpenAI gaining on Anthropic in business AI spending
Caveat Ramp data reflects payment transactions from its own corporate card network; it excludes large enterprises on other spend-management platforms and international markets. Share figures are percentages of Ramp-tracked businesses, not total global or revenue market share.

Open-Source AI Spend Reaches 6% of US Businesses as Enterprise Frontier Loyalty Softens

Why it matters
The Ramp data marks the first empirical signal, in actual payment transactions, not surveys, that advanced AI spenders are beginning to route workloads to open-weight models rather than frontier API vendors, and that Anthropic and OpenAI's growth deceleration among existing customers is not switching to each other but to a third category their pricing models do not currently compete with.
What's at stake
For most operators this is context, not a decision. For teams running high-volume, cost-sensitive workloads, content pipelines, classification, retrieval, the 6.1% figure and its upward trajectory suggest a viable open-weight routing layer is arriving faster than frontier lab pricing strategies anticipated, with model-serving platforms like Together, Fireworks, and Groq absorbing the spend that neither OpenAI nor Anthropic is capturing.
Detail

The share of AI-using businesses on Ramp that use model-serving platforms providing access to open-source models rose to 6.1% in July, up 0.2 percentage points from the prior month, a small absolute figure but one moving consistently upward as overall AI adoption among Ramp-tracked businesses reached nearly 56%.

Adoption of OpenAI and, to a lesser extent, Anthropic has slowed in recent months, not because new AI spenders are switching to open-source or Chinese models, as first-time buyers are still using the American model companies, but because more of their growth will have to come from existing businesses spending on AI, and those businesses are increasingly spending on open source.

Anthropic released what the Ramp index described as "the best AI model to ever hit the market" in Fable 5, and the first public data on business uptake one month in shows businesses are not yet using it heavily. The pattern, strong model scores, muted enterprise adoption curve, suggests procurement decisions among advanced spenders are increasingly driven by cost and workflow fit rather than benchmark position alone. The broader implication is that enterprise AI spending is becoming more fluid, with decreasing switching costs leading businesses to reallocate budgets as new models prove their worth.

Sources: Ramp: August 2026 AI Index (primary); Quartz: OpenAI gaining on Anthropic in business AI spending; TechCrunch: OpenAI is gaining on Anthropic with business users
Caveat Ramp data reflects its own corporate card network; figures describe the Ramp customer base (skewing tech-sector, US mid-market) and are not globally representative.